https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:53:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233845 EUVD-2026-233845 https://cve.radiocsirt.org/vuln/euvd-2026-233845 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35915 <p>OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has been fixed in v4.7.2. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>OpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has been fixed in v4.7.2. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-35915 https://cve.radiocsirt.org/vuln/ghsa-7grf-83vw-6f5x <p><strong>Affected:</strong> npm: @openzeppelin/contracts, npm: openzeppelin-solidity, npm: @openzeppelin/contracts-upgradeable, npm: openzeppelin-eth</p> <p>### Impact</p> <p>The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost.</p> <p>### Patches</p> <p>The issue has been fixed in v4.7.2.</p> <p>### References</p> <p>https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3587</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).</p> <p><strong>Affected:</strong> npm: @openzeppelin/contracts, npm: openzeppelin-solidity, npm: @openzeppelin/contracts-upgradeable, npm: openzeppelin-eth</p> <p>### Impact</p> <p>The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost.</p> <p>### Patches</p> <p>The issue has been fixed in v4.7.2.</p> <p>### References</p> <p>https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3587</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or need assistance deploying a fix, email us at [security@openzeppelin.com](mailto:security@openzeppelin.com).</p> https://cve.radiocsirt.org/vuln/ghsa-7grf-83vw-6f5x https://cve.radiocsirt.org/vuln/gsd-2022-35915 gsd-2022-35915 https://cve.radiocsirt.org/vuln/gsd-2022-35915